Multi-factor authentication for a user to log in to the portal
The multi-factor authentication (MFA) adds another security level to the login via user name and password by requiring the additional input of a one-time password to login to the portal of the icom Connectivity Suite. The password will be generated by an app on a separate device (e.g. smartphone) via the TOTP (Time-based One-time Password) algorithm. The user account of the icom Connectivity Suite must be registered one-time in the app for this. TOTP is an open standard and a variety of apps are available for various platforms such as the Open Source software FreeOTP. Since the one-time passwords are generated time-based and only valid for a limited time, it is necessary that the time on the separate device is accurate and synchronised regularly.
There are two options for setting up MFA for a user:
By the user using the parameter Multi-factor authentication (MFA).
By a user with admin rights for all users using the parameter Require multi-factor authentication (MFA).
Multi-factor authentication can either be enabled directly when creating a user account, or enabled and disabled at a later date on the User Information page.
Users with admin rights can use the Require multi-factor authentication (MFA) parameter to make MFA mandatory for other users. Users with read-only rights can use the Multi-factor authentication (MFA) parameter to enable MFA for themselves if it is set to Inactive, or, if it is set to Active, to reconfigure it (for example, to set it up on a new smartphone).
Please note!
Read-only users cannot disable MFA. Only admin users with the can disable MFA for a ready-only user.
Please note!
If a user’s MFA has been reactivated or renewed, it is no longer possible to generate a valid code using the app that was originally set up.
Setting up multi-factor authentication by the user
To set up multi-factor authentication, a user must follow these steps when prompted to do so during login:
Scan the QR code displayed using the TOTP app.
Generate a one-time password in the app.
Enter this one-time password in the icom Connectivity Suite.
Multi-factor authentication is now set up for this user. A one-time password will then be requested each time they log in.
Need to set up several devices for TOTP?
If you copy the TOTP secret from the Set up Multi-Factor Authentication (MFA) popup, you can setup multiple devices to generate a valid PIN, so long as those devices have an accurate time set.